1. What we collect
Account details: name, email address and password (stored only as a secure hash).
Identity details for KYC: CNIC number and expiry, date of birth, phone, address, bank account details, and images of your CNIC, bank statement and utility bill.
Financial records: deposits, withdrawals, investments, distributions and the receipts you upload.
Technical data: sign-in times, IP address and browser information, used to protect your account.
2. Why we use it
To verify your identity and meet anti-money-laundering obligations; to process deposits, investments, distributions and withdrawals; to keep accurate records; to secure your account; and to contact you about your account.
3. Who can see it
Your documents are stored in private storage and shown only to you and to authorised staff through short-lived links. Staff access is limited by role and every staff decision is recorded in an audit log.
We share data only with service providers that host and run the platform, and with authorities where the law requires it. We do not sell your data.
4. How long we keep it
We keep KYC and transaction records for as long as needed to meet legal and regulatory record-keeping requirements, and other data only as long as needed for the purposes above.
5. Your choices
You can view your details and history in your dashboard, update your phone and address in Settings, and contact support to ask about the data we hold or to correct it.